Hello,
  We are doing a feasibility study to replace one of the existing OAUTH solution with Keycloak.
And we were wondering if the following things are possible

1.) Can Keycloak act as Service Provider
2.) In the previous post Stian mentioned keycloak can act as IDP (Identity provider). But can Keycloak be integrated with external IDP over SAML.

Please advise

Thanks
Kamal